
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
File: f35276f0-246a-3323-89f4-2e26ac333010.roa (raw, json)
Hash identifier: QNyebFDA/ctoFeqr9PzDDBQDpDEEc54uu4TKD6h2e+Q=
Subject key identifier: EA:06:8C:39:FA:41:BB:6D:21:AF:1C:93:BB:FD:61:CB:92:F0:1A:2A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EF44CB2764C86D0F438810D60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
Signing time: Tue 25 Aug 2026 13:00:12 +0000
ROA not before: Tue 25 Aug 2026 13:00:12 +0000
ROA not after: Mon 23 Nov 2026 14:00:12 +0000
asID: 30036
IP address blocks: 108.178.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:4c:b2:76:4c:86:d0:f4:38:81:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 25 13:00:12 2026 GMT
Not After : Nov 23 14:00:12 2026 GMT
Subject: CN=33c1d36b-2424-41f1-806e-0e2615ca27c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:7a:e4:9a:a5:f8:a4:dd:ff:8e:1e:9a:a4:
4b:ba:ae:fd:09:ad:5e:12:c5:13:5d:fe:c1:ba:7c:
bc:61:82:77:cc:0c:46:93:ac:65:6a:fc:16:4f:22:
bf:92:c6:8d:50:8e:f1:52:2d:6e:0a:06:33:87:28:
16:6d:bd:46:78:8b:96:c2:02:25:3a:6b:db:df:e8:
e3:f1:7e:6f:4e:21:ea:26:17:45:cc:4a:11:35:45:
d6:b8:8c:d7:6e:d4:4f:b4:c5:08:9d:aa:ad:85:8e:
bd:5b:e3:5c:aa:51:b3:bb:23:29:9a:ef:2b:33:5c:
f3:20:8e:1c:9a:1e:86:11:19:2e:37:ac:ab:d6:50:
10:31:0a:cb:c1:f0:57:7b:0d:1f:8b:3e:69:ad:72:
2f:a2:49:e8:5e:43:17:33:19:9d:18:27:5e:b8:47:
c3:ee:53:67:84:ad:a3:30:9d:8e:15:e7:e3:13:1f:
c4:e9:6b:75:66:db:58:5a:b8:b7:7e:82:8f:93:5f:
46:bd:f9:75:39:81:88:22:de:8b:3e:77:0c:84:17:
7b:14:ef:ac:63:cc:b0:d0:c1:8b:8e:4c:d3:4b:1c:
68:72:dd:64:d6:8e:25:3f:a3:30:7f:41:89:46:40:
bd:62:45:19:26:d3:79:73:33:67:56:46:d8:1f:44:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:8C:39:FA:41:BB:6D:21:AF:1C:93:BB:FD:61:CB:92:F0:1A:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f35276f0-246a-3323-89f4-2e26ac333010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e0:62:dc:d1:b7:1a:9a:bf:e4:21:31:b6:f2:31:03:57:91:
6c:5d:63:e5:9f:3b:5d:78:b1:c8:34:a5:f4:76:e9:7f:b0:0d:
e1:c3:95:2a:b8:49:f9:61:a2:b0:de:f0:83:55:46:55:6b:cf:
f3:15:45:8d:c0:a0:83:0f:d4:60:94:32:2d:d4:4e:b8:c8:f8:
a5:f6:b2:a0:3d:43:be:31:0e:16:1d:00:f0:a7:7a:2d:b9:58:
65:6f:ae:86:ba:93:42:74:f0:a1:c7:38:e8:2a:47:33:3e:f7:
2b:e3:47:86:35:c4:e9:99:c1:d4:1e:d4:97:a9:63:1d:67:9c:
95:6b:37:0c:6c:8e:68:55:39:56:9f:dd:d6:42:4a:99:5e:5f:
14:70:29:1c:78:fb:bd:1a:d1:5c:85:f7:98:20:c0:08:53:34:
40:e2:3b:32:70:6c:b1:dc:d5:f4:c3:30:e5:8c:b4:08:14:98:
23:14:3c:24:46:a8:a5:8d:ae:5f:16:94:05:a7:45:6f:76:e3:
74:2f:de:60:c3:f9:58:f6:f6:b5:2e:d8:39:ce:43:3f:99:99:
55:ae:ca:26:d8:80:57:fd:36:1e:6d:6a:8e:62:bc:e7:6b:d7:
19:a8:19:30:9d:8b:dc:e0:3a:01:43:31:00:f4:05:83:e3:09:
7f:3c:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:27:28 2026 by rpki-client